Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/351cb403-249c-30d2-94a5-dd6cf603434c.roa
File:                     351cb403-249c-30d2-94a5-dd6cf603434c.roa (raw, json)
Hash identifier:          vY9eTq2meI9tI55Gt89wOSLhWaadGUpuXkA9xapWDZg=
Subject key identifier:   69:A3:4B:6F:EC:D4:5F:88:E1:7C:6D:FA:5D:4F:37:8F:F3:92:AE:D2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841161B5D814B58126FE09A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/351cb403-249c-30d2-94a5-dd6cf603434c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.62.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:61:b5:d8:14:b5:81:26:fe:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=25775101-bbd5-427f-8fe0-4ce7ca3764a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:d4:5c:15:7b:85:3d:5b:6e:32:04:2b:c1:
                    07:1f:68:f9:74:6d:42:19:46:15:3e:6e:e0:5e:e8:
                    36:32:81:fb:0d:2d:11:71:74:7b:4a:80:63:46:79:
                    f2:dc:4d:9c:e0:13:ea:c0:62:c2:74:d3:b9:d6:ab:
                    8f:6a:e2:52:bf:a9:73:1e:3d:e2:dc:92:a9:70:7c:
                    db:64:1a:8a:63:16:04:b8:9c:14:66:f6:dd:39:bf:
                    7c:ee:0c:69:36:7d:38:75:fb:c8:c8:15:00:d9:23:
                    a0:f2:3d:62:bc:c7:0e:95:c2:21:15:8f:d4:36:2d:
                    29:d9:87:2e:55:4f:f6:94:0e:06:0f:34:a8:dc:c4:
                    69:c2:13:ea:a5:90:f8:40:d3:9b:bb:54:71:81:93:
                    16:3d:60:74:5c:1c:96:d1:95:a3:51:9d:eb:4c:a1:
                    9e:f9:b2:e3:90:1c:a6:8d:c1:34:77:01:52:9c:0c:
                    5b:53:fa:75:16:e3:fa:a7:b2:09:27:f5:0d:b9:e5:
                    74:c8:75:db:1c:34:ab:15:4b:12:4a:f2:43:91:45:
                    de:e0:05:89:a2:f7:0c:bf:ef:6b:81:e7:24:e9:b6:
                    6f:27:df:53:37:47:09:68:78:a0:7c:ed:9b:d4:c9:
                    ab:5d:f3:4c:f9:fb:d0:a6:cf:e9:df:74:e8:d6:3c:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A3:4B:6F:EC:D4:5F:88:E1:7C:6D:FA:5D:4F:37:8F:F3:92:AE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/351cb403-249c-30d2-94a5-dd6cf603434c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:66:27:63:ba:57:1d:ca:2b:39:7a:47:e0:50:42:3e:2a:94:
         cf:fc:55:fc:13:6d:e8:91:62:40:8f:85:ae:a4:48:d5:e7:2b:
         04:87:a5:3c:35:a0:f1:de:6c:f8:9e:2a:46:12:8f:f8:86:a7:
         bd:c2:6c:09:10:1d:91:69:a4:93:f2:b8:f2:76:12:01:8d:4f:
         c6:e3:ae:33:e6:32:86:7f:bd:01:39:c9:e4:f0:25:d5:ff:c6:
         0c:e8:a4:d4:95:5e:68:5a:ab:b1:76:5e:83:85:e1:26:7b:e1:
         54:81:ea:5b:ec:82:02:38:14:de:93:32:93:82:3f:b2:ef:33:
         3b:35:89:5a:3e:1d:13:79:82:9a:37:f5:bc:4d:2c:72:d8:c2:
         67:08:b7:38:7f:ab:59:dd:d8:a0:9d:a7:b6:21:9c:89:0c:4f:
         f1:48:c7:70:df:23:71:ed:6f:9d:0b:76:12:f7:14:7a:55:9f:
         6b:8e:3f:fa:67:a6:48:10:48:35:de:66:8c:a1:51:ee:7e:01:
         a0:74:38:65:6d:c5:32:6f:d7:ff:36:62:47:6d:43:3e:26:15:
         d5:04:de:e4:32:7c:7e:92:f1:ae:4e:4c:41:d3:4f:b0:17:a8:
         99:68:08:92:c3:ee:ca:75:6d:03:e9:db:b8:9e:23:d7:06:59:
         90:5e:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:15:33 2025 by rpki-client